Working Title: Director of Information Security

Appointment Type: Limited

FTE: 100

Position Summary:

Knowledge, Skills and Abilities:

• Must be a US Citizen.

• Ability to pass Wisconsin Department of Justice, Crime Information Bureau, finger-printed background check (CJIS) conducted by the University Police department (https://www.doj.state.wi.us/dles/cib/background-check-criminal-history-information) within six months of hire and must maintain this status as a condition of employment.

• Bachelor's Degree in Information Security, Computer Science, Management Information Systems, Business, or a related field.

• Minimum of 3 years progressively increasing responsibility in an IT policy, IT security or IT governance role preferably in a higher-education setting.

• Knowledge of networking technologies including network security technologies including firewalls, VPN, network intrusion detection / prevention and related systems.

• Strong knowledge of IT security practices, application development and operational frameworks such as Incommon Assurance, NIST CyberSecuity Framework, ISO/IEC 27001 Security Framework, Open Web Application Security Project (OWASP) practices or Control Objectives for Information and Related Technologies COBIT.

• Strong knowledge of data and security regulations and their application in Higher Education, including FERPA, HIPAA-HITECH, PCI, GLBA, FTC's Red Flags Rule, GDPR, CJIS, WI Statute 134.98 and other applicable regulations.

• Ability in leading an Information Security Response team including triage of daily operational events and leadership of incident management teams including the ability to drive coordination with organizational management in a corelated response.

• Ability to lead internal and external regulatory self-assessment, audit and compliance response teams, to coach team members in providing responses in a truthful and coordinated manner while ensuring not to increase the risk profile for the institution.

• Ability to implement organizational change while utilizing IT project management principles, processes and methodologies.

• Strong ability to form and lead cross-functional teams in implementing process and organizational change.
• Ability to form strong business partnerships across distinct campus departments and business units.

• Ability to articulate strategy and vision and present plans, proposals and issues to executive management.

• Ability to manage multiple competing priorities and remain calm and focused in high-pressure situations.

• Ability to be self-directed under a general supervision by the two Chief Information Officers at two separate and distinct institutions. Ability to mitigate conflicting priorities and to decrease redundancy between the organizations while developing gained efficiencies of scale between the two organizations (do once, repeat results.) Account for time and provide written reports of activities to the organizations.

• Strong knowledge of current information security risks and threats as they apply to higher education institutions.

• 5 or more years progressively increasing responsibility in an IT policy, IT security or IT governance role preferably in a higher-education setting.

• A Management-oriented security certification is desired (e.g., CISSP, CISM or GSEC). If chosen as the successful canidate UW-River Falls/UW-Superior will support professional development/certification as part of professional development to attain certification within the first two years.

• Direct career building hands on background in software application development, system and service management or network administration as a foundation builder to a technical foundation.

• Direct career building involvement in management and business analysis of an organization, including financial, human resources and strategic decision-making process to establish a firm management foundation.

• Direct, recent experience with policy or compliance relating to data regulations such as FERPA, PCI, HIPAA, GLBA and/or PCI.

• Experience working independently to conduct technical investigations with diverse constituents, providing detailed written reports and presentations.

• Knowledge in the application of Wisconsin Open Records law regarding data set development in response to open records request. Ability to work with UW System Legal Counsel in response to civil or criminal subpoena and warrants for information served to the organization.

• Knowledge of systems logging and monitoring applications, including custom query and reporting development for creation of dashboards for security personnel, IT leadership and senior organizational management.

• Strong knowledge of business disaster preparedness, disaster recovery and business continuity principles, concepts, technologies and architectures.

• Strong knowledge of IT governance and service management frame works such as Microsoft Operational Framework (MOF) or ITILv3.

• Ability to foster a working relationship with law enforcement to serve as an advisor to them when required and to work with them as needed in criminal investigations.

Special Instructions to Applicants:

• Resume
• Unofficial Transcripts
• Letter of interest specifying qualifications and experience (cover letter)
• Names, addresses, telephone numbers and email addresses of at least three references who can specifically comment upon your professional experience in relation to this position (references)

About University of Wisconsin, River Falls

Our mission is to help prepare students to be productive, creative, ethical, engaged citizens and leaders with an informed global perspective.

Connections working at University of Wisconsin, River Falls